Meraki

Xydocq · ‎May 11 2023

Sorry to hear the printer isn't doing what it's supposed to do. I have one last question: When you were able to see the printer on the LAN, did you try to print right away or did you delete the printer first from the computers and did a fresh install? I have all my printers set to print on Standard-TCP/IP-Port with static IP. I don't remember what the other connection type was, that was used by default, but it sure was the reason for the problems I had with my printers.

Xydocq · ‎May 11 2023

The web-app and the phone-app are now showing the right port-numbers on the settings page.

Xydocq · ‎May 11 2023

Thanks @hidden0 Seems everything is now back to normal on the web-app.

Xydocq · ‎May 11 2023

I've had a similar setup some time ago. Wifi-network with an TP-Link extender as wireless adapter to wired devices. Bridge-Mode on Meraki go doesn't stand for wifi-bridge-mode. But it is needed to make things work the way you want it to be. You can find some information on this pages: Meraki Go - Wireless Meshing - Cisco Meraki Configuring VLANs in Meraki Go - Cisco Meraki Meraki Go - Wireless Address Translation - Cisco Meraki Meraki Go - When Bridge Mode is not Available (Auto NAT) - Cisco Meraki Your Meraki go has to be set to "bridge mode" to allow communication between VLANs. NAT-Mode allows Internet-access only. Devices connected to a NAT-type VLAN can't be explored. So your guest-wifi needs to run on a NAT-type VLAN, while devices you wish to share (printer, scanner, etc) or connect to (server, NAS, etc.), need a Bridge-type VLAN. Your TP-Link extender needs to have a static IP once connected to the Meraki Go wifi. Meraki Go - Local Network Addressing - Cisco Meraki Make sure you picked the right VLAN for those settings. DHCP-Server on the TP-Link needs to be turned off. This should allow devices connected to it getting the IPs assigned by Meraki Go. When you're doing the setup, use a Laptop or PC wired to the TP-Link and keep it close to the area where one of your APs or even better your router is located. Try to reach a device connected to the wired Meraki Go VLAN before you move the repeater to it's place.

Xydocq · ‎May 11 2023

Hello @ssbain Saying you want to provide Ethernet to a printer means your printer has no wifi-capability? Looking at the Onboarding guide The LAN-Port on the AP-Devices can only be used as WAN-Port or to power the AP over PoE but it's not used to connect wired devices to the wifi. Your TP-Link extender might have this capability but to answer that, we would need to know the model. Cheers

Xydocq · ‎May 1 2023

@MiriamGo wrote on another topic: "Hello all - many apologies for the inconvenience, but yes we have indeed sold out of all GS110 network switches. Due to supply chain constraints, we can’t yet share an accurate timeline for replacements. Rest assured, we know the Meraki Go platform is incomplete without switches and are working hard to resolve the issue as soon as possible. Stay tuned for more news on Meraki Go switches - we'll be sure to share more when we're able. Miriam Kung Meraki Go Product Marketing" This may answer your question

Xydocq · ‎May 1 2023

I have a GX20 and it doesn't offer static routing. But you can set 4 different VLAN's on a GX with possible 65'533 IP-adresses per VLAN, that will give you 262'132 IP-adresses the GX could handle. Not sure if you need that many for 200 clients. Meraki Go is a fast, secure and reliable networking solution designed with small businesses in mind. If you need solutions for bigger businesses you might want to look at Meraki Getting Started with Meraki - Cisco Meraki

Xydocq · ‎May 1 2023

Hello @NETITCY First of all: Each GX50 must be in the same company to form a Site-to-Site VPN I would suggest you change the look of the network at the main office a bit. The GX50 at the main office will be connected to the UTM firewall directly and your LAN will be managed by the GX50. I suggest to change the LAN settings on the UTM to 192.168.0.1/32. The GX50 will pick up the IP from the UTM and it should be 192.168.0.2 on the WAN connection. Create a VLAN on the GX50, like 192.168.10.1/24, and connect your LAN to it. Now you need to open UDP Ports 9350-9381 on the UTM for the GX50. Once this is all set, you should be able to complete the setup by following this guide Meraki Go - Site to Site VPN - Cisco Meraki If you need a single computer to access the VPN open UDP Ports 500, 1701 and 4500, those are used for L2TP/IPSec-VPN. Meraki Go - Client VPN Setup - Cisco Meraki Hope it helps

Xydocq · ‎Apr 26 2023

The only thing I get when I try to change the language is this Happens on the web, tried Edge and Firefox, the phone app works fine.

Xydocq · ‎Apr 26 2023

Hello @ByronNectar Not sure if I can be of any help to you. When you say it stopped working suddenly, when did that exactly happen? 5 or 6 weeks ago? If so it might be a bug in the Firmware of the GX20. There went something terribly wrong with the latest firmware-upgrade, mostly for PoE devices. After firmwareupgrade my GX20 shows a device connected on Port 6 on the GX20. Keep in mind the GX20 has only 5 physical Ports. I am still waiting for a fix on the firmware. If it stopped working 5 or 6 weeks ago, file a support ticket with Meraki and ask them to reset the firmware to the older version on your GX20. You might also want to have a look at Meraki Go - Wired Networks (VLAN) - Cisco Meraki Cheers

Xydocq · ‎Mar 31 2023

You can not run the GX20 on PoE. Meraki Go Router Firewall / Router Firewall Plus Switch Ports - Cisco Meraki

Xydocq · ‎Mar 17 2023

Lately I noticed something strange on the Meraki Go app. Devices even online showed offline and the information on the ports seem to be messed up. On this screen both devices connected to the GX20 show fine but when I dive into the information of each device it looks different. Is it Port 4 or Port 3? from what I recall port 4 isn't in use on my GX20. And this device is offline on Port 3, which I am sure was used for the other device, but uses Port 2 to be online?. Any one else experience such a behaviour lately? Firmware is 18.1.06

Xydocq · ‎Mar 15 2023

Hello @judywatson I've run into a similar problem. First here's what a MerakiGo-tech told me about port-settings on the GX: "A trunk port is a type of connection on a switch that is used to connect a guest virtual machine that is VLAN aware. All Routers and switches connect via a trunk port. Access Ports are configured for your client devices such as PCs and Printers." So I assume you try to connect your gaming laptop thru a trunk-port. Meraki Go Router Firewall / Router Firewall Plus Switch Ports - Cisco Meraki you can find some information here. You can Configure the VLAN for each port if needed. To change the setting find Advanced Settings on the Ports Detail tap. If the port is on Trunk try to change it to Access. Should look like that in the end. Hope this helps

Xydocq · ‎Mar 14 2023

Hello @hidden0 Thank you for the information. Not sure if I should be flattered to be the second one running into this problem. It seems I am somehow able to reproduce the error by simply changing some settings. Support case will be 09400847.

Xydocq · ‎Mar 7 2023

Hello @StuKoalaIT I guess the way to go is Meraki Go - Multi-Admin Access - Cisco Meraki

Xydocq · ‎Mar 6 2023

Hello @raumin To answer your questions: - Does Meraki Go keep connections logs ? For 1 year ? No, Meraki Go keeps those Iinformation for a month - Is it possible to import a list of blocked domain ? Yes, you can create a list with blocked domain-names Blocking Websites with Meraki Go - Cisco Meraki - Can we setup AP in NAT mode so the public wifi is isolated from staff network ? Yes Meraki Go - Guest Networks - Cisco Meraki Maybe you'll find what you're looking for here: Home - Cisco Meraki

Xydocq · ‎Mar 6 2023

Hello @BERNIEGX20 You won't find a setup solution for what you plan to do. Your FIOS Router already has a private IP-range (RFC 1918). By default the range should be 192.168.1.0/24. The router has the default-IP 192.168.1.1. You connect the GX20 to the IP-range of the FIOS Router, so the WAN-Port (Port1 on the GX20) get's an IP 192.168.1.x. x stands for the number assigned by the FIOS Router to the GX20. If you log on to the GX20 it will allow you to create VLAN's. Meraki Go - Wired Networks (VLAN) - Cisco Meraki The VLAN created on the GX20 has to be different from the one on the FIOS Router. The VLAN you create on the GX20 won't be accessible from 192.168.1.0/24 due to firewall-settings on the GX20. Unless you set some port forwarding rules on the GX20. But that's a different story. The GX20 alone doesn't allow wireless connections. If you want to have wireless access to the VLAN created on the GX20 you'll need additional hardware. This may sound odd: Why don't you create a wireless guest network on the FIOS Router for the people you want to give internet-access but no access to the LAN? In this case guests will have to use the wireless guest network and won't be allowed to have a wired connection. Only people allowed to the wired and non-guest-wireless will have access to your server. hope it helps

Xydocq · ‎Feb 28 2023

I run the same setup you described on different locations. The resources connected directly to the downstream router are available to the computers connected to the second router. But not the other way around. the second router is part of the network the downstream router creates. Any request sent to the second router is a request from the "internet". They are blocked by the firewall and won't go thru. The thing to do, place the network you want to hide behind the second router and the one you want to have access to to the downstream router. Creating two VLANs on one router will also work. But then acces from and to the other vlan is possible.

Xydocq · ‎Feb 8 2023

You can do that by adding those devices manually to the Reserved IP adresses list

Xydocq · ‎Feb 7 2023

Do you know the login information for the excite.com email-adress? You could try to sign in to gmail with that information. Not sure if you could create a new account with Meraki and add the device to it?

Xydocq · ‎Feb 5 2023

Well after some thinking... You're missing one Router to accomplish what you try to do. You have that Verizon Router. Let' say you set the LAN to 192.168.0.0/24 now you would need another Router, let's say you get the Meraki Go GX50. You connect the GX50 to the Verizon Router and give it a Static IP on the Verizon let it be 198.168.0.100. The GX50 is set to have dynamic IP-adress for Internet connection. Connect your GR10's to the GX50 and create the VLAN's you want to have, let's call them Default, ID 1 (IP 192.168.10.0/24) Church_Stuff, ID 2 (IP 198.168.20.0/24) and Church_Guest, ID 3 (IP 192.168.30.0/24). Connect your NAS to VLAN 1 and make the IP static let's make it 192.168.10.250. VLAN 2 gets a SSID "Stuff" and has to be set to Bridge-Mode. VLAN 3 gets a SSID "Guests" and needs to be set to NAT-Mode. Now everyone on VLAN 1 wired and VLAN 2 wireless can access the NAS and the resources placed on VLAN 1. VLAN 3 is blocked and only has Internet-Access. Now you would need to set some portforwarding rules on the GX50. Allow Port 445 for 192.168.10.250 and set the allowed IP-Range to 192.168.0.2 - 192.168.0.254. This will allow SMB access for a device directly plugged in the Verizon Router on the Network 192.168.0.0/24 but not from the Internet. To access the NAS from that Network thru SMB you have to use the Wan-IP given to the GX50 (192.168.0.100) The GX50 will translate that to 192.168.10.250. Now if you want acceess from abroad. I would recomment to use a VPN-Server and not use the ftp-protocoll. You can setup the VPN-Server on the GX50 and use that one to access the resources on the LAN. All you have to do is forward the VPN-Ports on the Verizon Router to the GX50 (192.168.0.100). If you want the ftp to work you'll have to set rules on the Verizon Router and the GX50. On the Verizon the Ports have to direct to the GX50 and on the GX50 the target is the NAS. You can't set a rule to allow IP-Adresses like you did on the SMB-configuration. Since 192.168.0.1 will be the only IP visible for the GX50. So please don't go ftp, use VPN!!! If you need wireless access to the Verizon Router. Maybe that one has a build in wireless you can use. This setup should give you exactly what you were asking for. Guests only be able to reach the Internet, wired has it's own VLAN (Default) with access to all resources, have a wirless VLAN for stuff with access to resources. the only thing that might be missing is wireless access to the NAS from one client but I guess you get an idea what you're missing to accomplish that too. Hope this helps.

Xydocq · ‎Feb 5 2023

Hello I will tell you how I have setup my network. I am not on Verizon and I don't use GR10 on my network, so I can't really tell you how to handle the setup there. I got a router from my ISP. The Router can be set to act as modem. It's called "IP-Passtrough". In that mode, all traffic from the internet is sent to Port 1 of the router. The other ports (Nr. 2-4) of the router still work for outgoing connections. So I use port 2 on the router for my "Guest-Network", I simply added a Wireless-Access-Point in Bridge-Mode to that port and gave it a SSID. And this isn't really a Guest-Network since it's used by my employess for private use. Now on Port 1, I had to connect another router. All that is done there, it hand's out two IP-adresses. One is for my Server (NAS) and one for another router that handles my LAN. So in general I set it up Router1-Router2-Router3. Since all incomming traffic is directed to Router2 it's the one that has the Port-forwarding job to do. Ports for the webservices are forwarded to the Server-IP. And other Ports, needed for the LAN-Setup, are forwarded to Router3. I added another Wireless-Access-Point in Bridge-Mode to the LAN generated by Router3. Now what happens: 1. Guests on the Guest-Network are only able to access the Internet. 2. If I connect a client computer to Router2, I am able to access webservices and the Interent but no resources on the LAN behind Router3. 3. I have full access to all my resources on the LAN (Router3), wired and wireless, full access to webservices and any client connected to Router2 and Internet-access. The only thing I can't reach is the Guest-Network. I would have to sign on to that trough Port 3 of my ISP's router. I guess that setup comes close to what you try to accomplish. I recomend you use one VLAN for Guests and one for all your church-related issues. Meraki Go - Wireless Address Translation - Cisco Meraki

Xydocq · ‎Feb 4 2023

Since I don't own a GS-device, I'm not sure if you can do that. The GX20 can be accessed thru a LAN connection directly (prior or after initial setup), by entering the local IP in a browser. Username would be the Serial-Number of the device, password isn't required. This leads to a basic setup-page where you can set Internet-Connection-type and port-management (disable/enable). Maybe the GS offers something similar?

Xydocq · ‎Jan 31 2023

Static IP assignment works on LAN. VPN doesn't really allow that to happen. In order to have static adresses you would need to set up a site2site VPN. To do that each location needs to be set to have different local IP-adresses (eg. Server-location: 10.10.0.0/24, Branch 1: 10.10.1.0/24, Branch 2: 10.10.2.0/24.. and so on). The VPN connection has to established by the routers and not by the computers itself. After that, your main computer at the server location (eg. 10.10.0.100) will be able to connect to PC1 at branch1 over the local fixed ip (eg. 10.10.1.222). A connection from a pc to a VPN-Server will always end up in a different adressing. The connection would look like that : Server (static IP) -> VPN-Router (set as server with static WAN-IP) -> Internet -> VPN-Router (client, gets a random IP from the VPN-server) -> PC1 (static IP). Hope that helps

Xydocq · ‎Jan 24 2023

Grettings David_L Not sure if your problem is solved or not. In my understanding Public IP and WAN IP is the same. The Public IP shows on the "Produkt Information" tap. Firmware GX 17.10.2. If you click on "Settings" on top right, it will lead you to "Hardware Settings" expand IP configuration (shows the puplic ip as well on that screen). It will open the settings of Lan-Port 1. There it should show your requested information on the WAN port with a local IP-adress and if that port is set to be DHCP or use a Static IP. You should also see some of the information when you go to http://setup.meraki.com hopefully you'll get the information you want from that.

About Xydocq

Xydocq

Community Record

Badges